Privacy Policy
Effective date: June 16, 2026
1. Data Controller
- Controller: HamSangEok
- Contact: hamsoo159@gmail.com
2. Personal Data We Collect
Account Information
| Data | Source |
|---|---|
| Email address | Google OAuth |
| Name | Google OAuth |
| Profile image URL | Google OAuth |
Service Usage Data
| Data | Description |
|---|---|
| Uploaded video files | Original videos uploaded by users and stored in AWS S3 |
| Generated clip files | Short-form clips generated by AI and stored in AWS S3 |
| Transcript text | Transcripts generated by WhisperX and Gemini |
| YouTube metadata | Titles, descriptions, and hashtags generated by Gemini |
| Credit balance | Used to manage service usage |
| Product analytics events | Pseudonymous page and product milestone events used to understand onboarding, upload, processing, and billing drop-off. |
Payment Data
| Data | Description |
|---|---|
| Polar customer ID | Identifier linked to payment processing. We do not store credit card details. |
| Subscription and order records | Plan, amount, status, and subscription period |
Cookies
We only use cookies required for authentication. We do not use analytics or advertising cookies. We use local browser storage to keep a pseudonymous analytics identifier and session identifier for first-party product analytics.
| Cookie | Purpose | Retention |
|---|---|---|
| authjs.session-token | JWT session authentication | 30 days |
| authjs.csrf-token | CSRF protection | Session |
| authjs.callback-url | OAuth redirect handling | Session |
3. Third-Party Processing
| Service | Data Transferred | Purpose | Server Location |
|---|---|---|---|
| Google OAuth | Email, name, profile image | User authentication | United States |
| Google Gemini API | Transcript text | AI highlight detection and metadata generation | United States |
| AWS S3 | Video files and clip files | File storage | Asia Pacific (Sydney) |
| Neon | Application database records | Database hosting | United States |
| Polar | Email and payment records | Payment processing | United States |
| Modal.com | Video files | GPU video processing | United States |
| Inngest | Background job event data | Background job processing | United States |
| Vercel | Request logs | Application hosting | Seoul |
| Sentry | Error messages, stack traces, and the user ID of the account involved. Email addresses and names are not sent. | Error monitoring | United States |
4. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Until the account is deleted |
| Video and clip files | Until deleted by the user |
| Transcripts and metadata | Until the related clip is deleted |
| Payment records | 5 years, where required by law |
| Temporary scene detection data | Deleted immediately after processing |
| Product analytics events | 90 days maximum for raw analytics events. User-linked rows are deleted earlier when the linked account is deleted. |
| Error reports | Held by Sentry under the retention period of our plan, then deleted automatically. Reports are stored outside our database and are not deleted by deleting an account. |
5. Data Protection
- All communications are encrypted over HTTPS.
- Session tokens are managed with httpOnly and Secure cookies.
- Credit card information is not stored in our database. Polar manages payment card data and PCI DSS compliance.
- Scene detection data is processed temporarily for video analysis and is not stored in the database.
- Product analytics events do not include uploaded file names, video URLs, S3 keys, payment card details, or OAuth tokens.
6. User Rights
- You may request access to, correction of, or deletion of your personal data.
- When account deletion is requested, all related data, including database records and stored files, will be deleted.
- To submit a request, contact us at hamsoo159@gmail.com.